Privacy Policy

Welcome to Evelant. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (evelant.ai), use our web app (chat.evelant.ai) or use our browser extension, and tell you about your privacy rights and how the law protects you.

Account Data: When you register for an account using email/password or third-party OAuth providers (like Google), we collect your email address and profile name.

Messages & Context: To provide AI assistant features, we process the text you type into Evelant together with the parts of the page you are viewing that are relevant to your question. This data is transmitted securely to our servers and then to the AI provider for the model you use (OpenAI, Anthropic or Google). Your messages and Evelant's answers are saved as your chat history unless you turn off Save history in Settings.

Page Content: When you are signed in, the extension reads the pages you open so it can answer questions about them. See Page Reading & Pages Behind a Login for what is read, what is kept and how to turn it off.

Voice Input (Voice Ask): Voice Ask is an optional feature you trigger explicitly with the Alt+S shortcut, and it can be turned off entirely from the extension popup. Your microphone is accessed only while a Voice Ask session is active — never in the background, and never without you starting it. Speech is transcribed to text by your browser's built-in Web Speech API, which is provided by Google as part of Chrome; the audio itself is handled by that browser service and is never recorded, stored, or transmitted to Evelant's servers. Only the resulting text transcript is sent to us, and it is then treated exactly like a typed message as described above. We do not retain the audio at any point.

Read Aloud: When you ask Evelant to read an answer aloud, the text of that answer is sent to ElevenLabs to turn it into speech.

Usage Data: We record which features you use (for example, opening the chat or starting a room) to improve the service. These events are linked to your account but never include the content of your messages or of the pages you read. You can turn this off under Settings → Privacy & Data → Product analytics.

When you are signed in, the extension reads the text of each page you open, by default, so it can answer questions about that page straight away. This includes pages behind a login, such as internal wikis, dashboards or web mail: Evelant reads what your browser is already showing and treats those pages like any other.

The text of each page read this way is sent to Evelant's servers, where:

• it is stored, split into passages, as your page memory, so Evelant can answer about that page again without re-reading it; and
• it is sent to one of our AI providers to index it for search and to produce a short summary of the page.

When you are not signed in, page text stays on your device until you send a message. Evelant never reads the contents of payment or verification widgets embedded in a page, such as Stripe or PayPal checkout, reCAPTCHA, hCaptcha or Cloudflare challenges.

Page memory is private to your account. It is never shown to anyone else, including members of a shared room.

Your controls:

• Turn page reading off everywhere under Settings → Context & Search → Enable Page Scan.
• Turn it off for particular sites under Settings → Site Rules. We recommend this for any site with confidential content.
• Delete your stored page memory at any time under Settings → Privacy & Data → Page memory. Turning page reading off stops new pages from being read, but does not delete page memory that is already stored.

If you use Evelant at work, make sure you are allowed to share the pages you use it on with third-party AI providers.

• To provide, maintain, and improve the Evelant service.
• To process your AI queries and return responses.
• To remember pages you have read, so Evelant can answer about them again.
• To manage your account and authenticate you.
• To communicate with you regarding updates, security alerts, and support messages.

Evelant acts as an intermediary. Your prompts and the necessary page context are sent to third-party Large Language Model (LLM) providers to generate responses.

We do NOT sell your personal information. We configure our API requests so that our AI providers do NOT use your data to train their models, adhering to enterprise data privacy standards.

Your own API keys (Max plan): If you connect your own key or server for a provider (Anthropic, OpenAI, Google AI Studio, DeepSeek, Kimi, GLM, Qwen or Ollama), requests made with it go to that provider under your own account with them. That provider's terms and privacy policy apply to those requests, including whether it may use your data for training.

We use the following third-party service providers (“subprocessors”) to operate Evelant. Each is contractually bound to protect your data:

When you turn a chat into a room and invite people, everyone in the room can see:

• The room's whole conversation: every member's messages and Evelant's answers, which can quote the pages members asked about. This includes messages sent before the chat became a room.
• Each member's display name, profile picture and color, and who is in the room right now.
• The page each message was sent from (its address and title), depending on the room's page setting: all pages, only pages the owner selects, or none. The owner can hide any page, and each member can hide the pages their own messages came from.
• If the owner turns on live sharing (it is off by default): members' cursors, text selections and highlights while they are on the same page.

Room members never see your page memory, your settings or your chats outside the room. Live sharing never runs on pages at local or private-network addresses. Invitation links expire and can be limited to a number of uses, and the owner chooses how long the room lasts. An email invitation sends the invitee's email address to our email provider, Resend.

Evelant's servers run on Microsoft Azure in Indonesia. To provide the Service, your data is also processed by the providers listed under Subprocessors, several of which process data in other countries, including the United States. Your data may therefore be transferred to and processed in countries whose data protection laws differ from those where you live.

• Messages & chat history: Stored until you delete them from your dashboard, they pass the retention period you set under Settings → Privacy & Data, or you request account deletion.
• Page memory: Stored until you clear it under Settings → Privacy & Data or delete your account.
• Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
• Analytics events: Retained for up to 12 months, then aggregated or deleted.
• Billing records: Retained for 7 years to comply with financial regulations, even after account deletion.

Your data is never used to train AI models. This applies to all three LLM providers we use (Google, OpenAI, Anthropic) for requests made on Evelant's own keys. Requests made with your own API key follow your provider's terms.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Your data is encrypted in transit using HTTPS/TLS, and API keys you connect are stored encrypted.

The web dashboard uses cookies primarily for authentication and session management. The browser extension uses secure local storage on your device to store user preferences and your unique extension session token.

Evelant is not intended for anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us personal data, contact us and we will delete it.

You have the right to request access, correction, or deletion of your personal data stored on our servers. You can manage your account directly from your dashboard settings, export a copy of your data under Settings → Privacy & Data, or contact us to permanently delete your account and associated chat history.

If you have any questions about this privacy policy or our privacy practices, please contact us at: [email protected].